Paste a package-lock.json or yarn.lock and see what is in it: the package count, every package installed at more than one version, git and tarball sources, and which dependencies run install scripts.
The file never leaves your browser.
devtoollab.com/tools/lockfile…
Developer tools for coding, debugging, testing, data conversion, and everyday workflows. Free, simple, and built to help developers work faster.


